92 matches found
CVE-2025-11175
CVE-2025-11175 concerns the MediaWiki DiscussionTools extension (version 1.44 and 1.43 affected) and is caused by improper neutralization of certain expression language elements, enabling a Regular Expression exponential blowup. Public entries from NVD, Debian security tracker, and related OSV en...
OSV-2025-1004 Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=470469212 Crash type: Security exception Crash state: com.codeintelligence.jazzer.sanitizers.RegexInjection.hookInternal com.codeintelligence.jazzer.sanitizers.RegexInjection.patternHook...
Siemens SIMATIC S7-1500 Integer Overflow or Wraparound (CVE-2020-10878)
Perl before 5.30.3 has an integer overflow related to mishandling of a PLregkindOPn == NOTHING situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection. This plugin only works with Tenable.ot. Please visit...
EUVD-2021-1100
Malware in sbrugna...
EUVD-2021-23834
Malware in sbrugna...
CVE-2021-37262
JFinalcms 5.1.0 is vulnerable to regex injection that may lead to Denial of Service...
GLiNet - Router Authentication Bypass
DZONERZY Security Research GLiNet: Router Authentication Bypass ======================================================================== Contents ======================================================================== 1. Overview 2. Detailed Description 3. Exploit 4. Timeline...
ffcss Security Vulnerabilities
ffcss is a CLI interface for applying and configuring Firefox CSS themes. A security vulnerability exists in versions prior to ffcss 0.2.0, which stems from a vulnerability that allows an attacker to introduce all characters of a regular expression by bypassing the limitations of the...
GHSA-6W63-H3FJ-Q4VW fast-xml-parser vulnerable to Regex Injection via Doctype Entities
Impact "fast-xml-parser" allows special characters in entity names, which are not escaped or sanitized. Since the entity name is used for creating a regex for searching and replacing entities in the XML body, an attacker can abuse it for DoS attacks. By crafting an entity name that results in an...
fast-xml-parser vulnerable to Regex Injection via Doctype Entities
Impact "fast-xml-parser" allows special characters in entity names, which are not escaped or sanitized. Since the entity name is used for creating a regex for searching and replacing entities in the XML body, an attacker can abuse it for DoS attacks. By crafting an entity name that results in an...
GitHub Security Lab: Java: Regex injection
This bug was reported directly to GitHub Security Lab...
cve-search has an unspecified vulnerability
Cve-Search is a tool that performs local searches for known vulnerabilities. It is used for searching, indexing, correlating and managing software vulnerabilities. cve-search versions prior to 4.1.0 have a security vulnerability that stems from lib/DatabaseLayer.py allowing regular expression...
CVE-2021-45470
lib/DatabaseLayer.py in cve-search before 4.1.0 allows regular expression injection, which can lead to ReDoS regular expression denial of service or other impacts...
cve-search 安全漏洞
Cve-Search is a tool that performs local searches for known vulnerabilities. It is used for searching, indexing, correlating and managing software vulnerabilities. cve-search versions prior to 4.1.0 have a security vulnerability that stems from lib/DatabaseLayer.py allowing regular expression...
CVE-2021-37262
JFinalcms 5.1.0 is vulnerable to regex injection that may lead to Denial of Service...
CVE-2021-37262
JFinalcms 5.1.0 is vulnerable to regex injection that may lead to Denial of Service...
CVE-2021-37262
JFinalcms 5.1.0 is vulnerable to regex injection that may lead to Denial of Service...
Design/Logic Flaw
JFinalcms 5.1.0 is vulnerable to regex injection that may lead to Denial of Service...
CVE-2021-37262
CVE-2021-37262 affects JFinal_cms 5.1.0. The vulnerability is a regex injection in handling user input, leading to Denial of Service. Multiple connected sources confirm the app/framework context and the nature of the issue, but no concrete exploit details or official fix/version remediation are p...
